On this page:

The SAPFire ® Analysis Engine, by default, can utilize up to total number of physical cores (*) to speed up analysis and response recovery operations.

On systems with more than 64 logical processors running Windows 11, current versions of CSI programs can accurately detect/report the total number of physical cores on the "Advanced SAPFire Options" form (the "Program Determined" value). Older versions of CSI programs might underestimate the number of available physical cores, and if it turns out to be the case, explicitly setting the "Number of (Internal) Threads" to actual total number of physical cores is recommended to be able to fully utilize the computational resources of the system.

(*) A physical processor (CPU) can consist of one or more physical cores. A core is one physical processor unit, which can consist of one or more logical processors. For example, a system with 2 CPUs, each CPU with 18 physical cores, and each physical core with 2 logical processors provides the operating system (OS) with a total of 2 * 18 = 36 physical cores and 36 * 2 = 72 logical processors.

See also

• https://learn.microsoft.com/en-us/windows/win32/procthread/processor-groups#behavior-starting-with-windows-11-and-windows-server-2022